Appl. No. 10/687,217 

Amdt . dated December 14, 2007 

Reply to Advisory Action of November 1, 2007 

This listing of claims replaces all prior versions, 
and listings of claims in the instant application: 

Listing of Claims; 

1. (Currently Amended) A method for digital content 
access control, comprising: 

determining, on a user device, digital content 
to be made accessible via a rights locker wherein 
said rights locker comprises an entity, different 
from said user device, providing a description of 
doocribing a user's access rights for digital content 
and controlling access to the descritpon aooociatcd 
with said righto locker ; 

determining, on said user device, enrollment 
authentication data for use by a rights locker 
provider ; 

sending, from said user device to said right 
locker provider for the rights locker , a rights 
locker enrollment request to a righto locker 
provider, — said righto locker enrollment rcqucot 
comprising a digital content request and said 
enrollment authentication data; and 

receiving, on said user device, an authenticated 
rights locker access request in response to said 
sending, said authenticated rights locker access 
request for subsequent use in accessing digital 
content associated with said rights locker. 

2. (Original) The method of claim 1 wherein said 
digital content request comprises a request for 
initializing said rights locker with rights to specified 
digital content. 

3. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises: 
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rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 

4. (Original) The method of claim 3 wherein said 
rights locker access authentication data comprises payment 
for use of a rights locker service. 

5. (Original) The method of claim 3 wherein said 
rights content access authentication data comprises payment 
for rights deposited in said rights locker. 

6. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or 
replacing enrollment authentication data of said previous 
enrollment request . 

7. (Original) The method of claim 1, further 
comprising storing at least part of said authenticated 
rights locker access request in a bookmark on said user 
device . 



8. (Original) The method of claim 1 wherein said 
authenticated rights locker access request is embedded in a 
Web cookie. 
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9. (Currently Amended) The method of claim 1 wherein 
said authenticated rights locker access request is 
encapsulated in [ [an] ] a Hypertext Transfer Protocol 
Response message. 
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10. (Currently Amended) A method for digital content 
access control, comprising: 

determining, on a user device, a digital content 
specification and associated authenticated rights 
locker access request; 

sending, from said user device to a rights 
locker provider of rights lockers , said authenticated 
rights locker access request and said digital content 
specification; 

receiving, on said user device from said rights 
locker provider , an authenticated digital content 
request and a new authenticated rights locker access 
request in response to said sending; 

sending, from said user device to a digital 
content repository , said authenticated digital 
content request; and 

receiving, on said user device from said digital 
content repository , said digital content in response 
to said sending said authenticated digital content 
request . 

11. (Original) The method of claim 10 wherein 
said method further comprises determining one or 

more delivery parameters, said one or more delivery 
parameters indicating where said digital content should 
be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or 
more delivery parameters. 

12. (Original) The method of claim 10, further 
comprising storing at least part of said new authenticated 
rights locker access request in a bookmark on said user 
device . 
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13. (Original) The method of claim 10 wherein said 
new authenticated rights locker access request is embedded 
in a Web cookie. 
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14. (Previously Presented) The method of claim 10 
wherein said new authenticated rights locker access request 
is encapsulated in a Hypertext Transfer Protocol Response 
message . 

15. (Currently Amended) A method for digital content 
access control, comprising: 

determining, on a user device, a digital content 
specification and associated authenticated rights 
locker access request; 

sending, from said user device to a rights 
locker provider of rights lockers , said authenticated 
rights locker access request and said digital content 
specification; 

receiving, on said user device from said rights 
locker provider , a new authenticated rights locker 
access request in response to said sending; and 

receiving, on said user device from a digital 
content repository , said digital content in response 
to said sending. 

16. (Original) The method of claim 15 wherein 
said method further comprises determining one or 

more delivery parameters, said one or more delivery 
parameters indicating where said digital content should 
be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or 
more delivery parameters. 
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17. (Original) The method of claim 15, further 
comprising storing at least part of said new authenticated 
rights locker access request in a bookmark on said user 
device . 
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18. (Original) The method of claim 15 wherein said 
new authenticated rights locker access request is embedded 
in a Web cookie. 

19. (Previously Presented) The method of claim 15 
wherein said new authenticated rights locker access request 
is encapsulated in a Hypertext Transfer Protocol Response 
message . 
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20. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

determining, on a user device, digital content 
to be made accessible via a rights locker wherein 
said rights locker comprises an entity, different 
from said user device, providing a description of 
describing a user's access rights for digital content 
and controlling access to the descritpon associated 
with said righto locker ; 

determining, on said user device, enrollment 
authentication data for use by a rights locker 
provider ; 

sending, from said user device to said right 
locker provider for the rights locker , a rights 
locker enrollment request to a rights locker 
provider, — said righto locker enrollment request 
comprising a digital content request and said 
enrollment authentication data; and 

receiving, on said user device, an authenticated 
rights locker access request in response to said 
sending, said authenticated rights locker access 
request for subsequent use in accessing digital 
content associated with said rights locker. 

21. (Original) The program storage device of claim 
20 wherein said digital content request comprises a request 



Page 6 of 28 



Appl. No. 10/687,217 

Amdt. dated December 14, 2007 

Reply to Advisory Action of November 1, 2007 



for initializing said rights locker with rights to 
specified digital content. 

22. (Original) The program storage device of claim 
20 wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 

23. (Original) The program storage device of claim 
22 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 

24. (Original) The program storage device of claim 
22 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights 
locker . 

25. (Original) The program storage device of claim 
20 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment 
request for said rights locker, said reenrollment key for 
supplementing or replacing enrollment authentication data 
of said previous enrollment request. 

26. (Original) The program storage device of claim 
20, said method further comprising storing at least part of 
said authenticated rights locker access request in a 
bookmark on said user device. 
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27. (Original) The program storage device of claim 
20 wherein said authenticated rights locker access request 
is embedded in a Web cookie. 
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28. (Previously Presented) The program storage 
device of claim 20 wherein said authenticated rights locker 
access request is encapsulated in a Hypertext Transfer 
Protocol Response message. 

29. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

determining, on a user device, a digital content 
specification and associated authenticated rights 
locker access request; 

sending, from said user device to a rights 
locker provider of rights lockers , said authenticated 
rights locker access request and said digital content 
specification; 

receiving, on said user device from said rights 
locker provider , an authenticated digital content 
request and a new authenticated rights locker access 
request in response to said sending; 

sending, from said user device to a digital 
content repository , said authenticated digital 
content request ; and 

receiving, on said user device from said digital 
content repository , said digital content in response 
to said sending said authenticated digital content 
request . 

30. (Original) The program storage device of claim 
29 wherein 

said method further comprises determining one or 
more delivery parameters, said one or more delivery 
parameters indicating where said digital content 
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should be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one 
or more delivery parameters. 
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31. (Original) The program storage device of claim 

29, said method further comprising storing at least part of 

said new authenticated rights locker access request in a 
bookmark on said user device. 



32. (Original) The program storage device of claim 
29 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

33. (Previously Presented) The program storage 
device of claim 29 wherein said new authenticated rights 
locker access request is encapsulated in a Hypertext 
Transfer Protocol Response message. 

34. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

determining, on a user device, a digital content 
specification and associated authenticated rights 
locker access request; 

sending, from said user device to a rights 
locker provider of rights lockers , said authenticated 
rights locker access request and said digital content 
specification ; 

receiving, on said user device from said rights 
locker provider , a new authenticated rights locker 
access request in response to said sending; and 

receiving, on said user device from a digital 
content repository , said digital content in response 
to said sending. 
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35. (Original) The program storage device of claim 
34 wherein 

said method further comprises determining one or 
more delivery parameters, said one or more delivery 
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parameters indicating where said digital content 
should be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one 
or more delivery parameters. 

36. (Original) The program storage device of claim 
34, said method further comprising storing at least part of 
said new authenticated rights locker access request in a 
bookmark on said user device. 

37. (Original) The program storage device of claim 
34 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

38. (Previously Presented) The program storage 
device of claim 34 wherein said new authenticated rights 
locker access request is encapsulated in a Hypertext 
Transfer Protocol Response message. 

39. (Currently Amended) A user device for digital 
content access control, comprising: 

means for determining, on said user device, 
digital content to be made accessible via a rights 
locker wherein said rights locker comprises an 
entity, different from said user device, providing a 
description of describing a user's access rights for 
digital content and controlling access to the 
descritpon associated with paid rights locker ; 

means for determining, on said user device, 
enrollment authentication data for use by a rights 
locker provider ; 

means for sending, from said user device to said 
right locker provider for the rights locker , a rights 
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locker enrollment request to a rights locker 
provider, — oaid righto locker enrollment request 
comprising a digital content request and said 
enrollment authentication data; and 
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means for receiving, on said user device, an 
authenticated rights locker access request in 
response to said sending, said authenticated rights 
locker access request for subsequent use in accessing 
digital content associated with said rights locker. 



40. (Previously Presented) The user device of claim 
3 9 wherein said digital content request comprises a request 
for initializing said rights locker with rights to 
specified digital content. 

41. (Previously Presented) The user device of claim 
39 wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 

42. (Previously Presented) The user device of claim 
41 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 

43. (Previously Presented) The user device of claim 
41 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights 
locker. 
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44. (Previously Presented) The user device of claim 
39 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment 
request for said rights locker, said reenrollment key for 
supplementing or replacing enrollment authentication data 
of said previous enrollment request. 
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45. (Previously Presented) The user device of claim 
39, further comprising means for storing at least part of 
said authenticated rights locker access request in a 
bookmark on said user device. 

46. (Previously Presented) The user device of claim 
39 wherein said authenticated rights locker access request 
is embedded in a Web cookie. 

47. (Previously Presented) The user device of claim 
39 wherein said authenticated rights locker access request 
is encapsulated in a Hypertext Transfer Protocol Response 
message . 

48. (Currently Amended) A user device for digital 
content access control, comprising: 

means for determining, on said user device, a 
digital content specification and associated 
authenticated rights locker access request; 

means for sending, from said user device to a 
rights locker provider of rights lockers , said 
authenticated rights locker access request and said 
digital content specification; 

means for receiving, on said user device from 
said rights locker provider , an authenticated digital 
content request and a new authenticated rights locker 
access request in response to said sending; 

means for sending, from said user device to a 
digital content repository , said authenticated 
digital content request; and 

means for receiving, on said user device from 
said digital content repository , said digital content 
in response to said sending said authenticated 
digital content request. 

49. (Previously Presented) The user device of claim 
48 wherein 
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said user device further comprises means for 
determining one or more delivery parameters, said one 
or more delivery parameters indicating where said 
digital content should be sent, a delivery mechanism, 
or both; and 

said means for sending further comprises means 
for sending said one or more delivery parameters. 

50. (Previously Presented) The user, device of claim 
48, further comprising means for storing at least part of 
said new authenticated rights locker access request in a 
bookmark on said user device. 

51. (Previously Presented) The user device of claim 
48 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

52. (Previously Presented) The user device of claim 
48 wherein said new authenticated rights locker access 
request is encapsulated in a Hypertext Transfer. Protocol 
Response message. 

53. (Currently Amended) A user device for digital 
content access control, comprising: 

means for determining, on said user device, a 
digital content specification and associated 
authenticated rights locker access request; 

means for sending, from said user device to a 
rights locker provider of rights lockers , said 
authenticated rights locker access request and said 
digital content specification; 

means for receiving, on said user device from 
said rights locker provider , a new authenticated 
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rights locker access request in response to said 
sending; and 
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means for receiving, on said user device from a 
digital content repository , said digital content in 
response to said sending. 

54. (Previously Presented) The user device of claim 
53 wherein 

said user device further comprises means for 
determining one or more delivery parameters, said one 
or more delivery parameters indicating where said 
digital content should be sent, a delivery mechanism, 
or both; and 

said means for sending further comprises means 
for sending said one or more delivery parameters. 

55. (Previously Presented) The user device of claim 
53, further comprising means for storing at least part of 
said new authenticated rights locker access request in a 
bookmark on said user device. 

56. (Previously Presented) The user device of claim 
53 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

57. (Previously Presented) The user device of claim 
53 wherein said new authenticated rights locker access 
request is encapsulated in a Hypertext Transfer Protocol 
Response message. 

58. (Currently Amended) A user device for digital 
content access control, comprising: 

a memory for storing said digital content; and 
a processor configured to: 

determine, on said user device, digital 
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content to be made accessible via a rights locker 
wherein said rights locker comprises an entity, 
different from said user device, providing a 
description of describing a user's access rights 
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for digital content and controlling access to the 
descritpon associated with said rights locker ; 

determine, on said user device, enrollment 
authentication data for use by a rights locker 
provider ; 

send, from said user device to said right 
locker provider for the rights locker , a rights 
locker enrollment request to a righto locker 
provider, — said rights locker enrollment request 
comprising a digital content request and said 
enrollment authentication data; and 

receive, on said user device, an 
authenticated rights locker access request in 
response to said sending, said authenticated 
rights locker access request for subsequent use 
in accessing digital content associated with said 
rights locker. 

59. (Previously Presented) The user device of claim 
58 wherein said digital content request comprises a request 
for initializing said rights locker with rights to 
specified digital content. 

60. (Previously Presented) The user device of claim 
58 wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 
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61. (Previously Presented) The user device of claim 
60 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 
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62. (Previously Presented) The user device of claim 
60 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights 
locker . 



63. (Previously Presented) The user device of claim 
58 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment 
request for said rights locker, said reenrollment key for 
supplementing or replacing enrollment authentication data 
of said previous enrollment request. 

64. (Previously Presented) The user device of claim 
58 wherein said user device comprises a smart card. 

65. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a Java Card™ 
technology- enabled smart card. 

66. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a CDMA (Code Division 
Multiple Access) technology-enabled smart card. 

67. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 

68. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a WIM (Wireless 
Interface Module) . 
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69. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module) . 
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70. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a UIM (User Identity 
Module) . 

71. (Previously Presented) The user device of claim 
64 wherein said smart card comprises a R-UIM (Removable 
User Identity Module) . 

72. (Previously Presented) The user device of claim 
58 wherein said processor is further configured to store at 
least part of said authenticated rights locker access 
request in a bookmark on said user device. 

73. (Previously Presented) The user device of claim 
58 wherein said authenticated rights locker access request 
is embedded in a Web cookie. 

74. (Previously Presented) The user device of claim 
58 wherein said authenticated rights locker access request 
is encapsulated in a Hypertext Transfer Protocol Response 
message. 

75. (Currently Amended) A user device for digital 
content access control, comprising: 



a memory for storing said digital content; and 
a processor configured to: 

determine, on said user device, a digital 
content specification and associated 
authenticated rights locker access request; 

send, from said user device to a rights 
locker provider of rights lockers , said 
authenticated rights locker access request and 
said digital content specification; 
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receive, on said user device from said 
rights locker provider , an authenticated digital 
content request and a new authenticated rights 
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locker access request in response to said 
sending; 

send, from said user device to a digital 
content repository , said authenticated digital 
content request; and 

receive, on said user device from said 
digital content repository , said digital content 
in response to said sending said authenticated 
digital content request. 

76. (Previously Presented) The user device of claim 
75 wherein 

said processor is further configured to determine 
one or more delivery parameters, said one or more 
delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; 
and 

said sending further comprises sending said one or 
more delivery parameters. 

77. (Previously Presented) The user device of claim 
75 wherein said user device comprises a smart card. 

78. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

79. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a CDMA (Code Division 
Multiple Access) technology-enabled smart card. 
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80. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 
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81. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a WIM (Wireless 
Interface Module) . 

82. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module) . 

83. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a UIM (User Identity 
Module) . 

84. (Previously Presented) The user device of claim 
77 wherein said smart card comprises a R-UIM (Removable 
User Identity Module) . 

85. (Previously Presented) The user device of claim 
75 wherein said processor is further configured to store at 
least part of said new authenticated rights locker access 
request in a bookmark on said user device. 

86. (Previously Presented) The user device of claim 
75 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

87. (Previously Presented) The user device of claim 
75 wherein said new authenticated rights locker access 
request is encapsulated in a Hypertext Transfer Protocol 
Response message. 

88. (Currently Amended) A user device for digital 
content access control , comprising : 

a memory for storing said digital content; and 



GUNNISON, McKAY & 

HODGSON, L.L. P. 
Garden West Office Plaza 
1 900 Garden Road, Suite 220 
Monterey. CA 93940 

(331)655-0880 
Fax (831)655*888 



a processor configured to: 



determine, on said user device, a digital 
content specification and associated 
authenticated rights locker access request; 
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send, from said user device to a rights 
locker provider of rights lockers , said 
authenticated rights locker access request and 
said digital content specification; 

receive, on said user device from said 
rights locker provider , a new authenticated 
rights locker access request in response to said 
sending; and 

receive, on said user device from a digital 
content repository , said digital content in 
response to said sending. 

89. (Previously Presented) The user device of claim 
88 wherein 

said processor is further configured to determine 
one or more delivery parameters, said one or more 
delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; ■ 
and 

said sending further comprises sending said one or 
more delivery parameters. 

90. (Previously Presented) The user device of claim 
88 wherein said user device comprises a smart card. 

91. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

92. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a CDMA (Code Division 
Multiple Access) technology-enabled smart card. 
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93. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 
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94. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a WIM (Wireless 
Interface Module) . 

95. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module) . 

96. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a UIM (User Identity 
Module) . 

97. (Previously Presented) The user device of claim 
90 wherein said smart card comprises a R-UIM (Removable 
User Identity Module) . v 

98. (Previously Presented) The user device of claim 
88 wherein said processor is further configured to store at 
least part of said new authenticated rights locker access 
request in a bookmark on said user device. 

99. (Previously Presented) The user device of claim 
88 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

100. (Previously Presented) The user device of claim 
88 wherein said new authenticated rights locker access 
request is encapsulated in a Hypertext Transfer Protocol 
Response message. 
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